Zyxel NAS Multiple Vulnerabilities (Jun 2024) - Active Check

Multiple Zyxel NAS devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only e.g.:...

CVE-2024-29974

creationtimestamp| type| source ---|---|--- 2024-06-05 17:33:54+00:00| published-proof-of-concept| https://t.me/itsecnews/4475 2024-06-06 11:53:03+00:00| seen| https://t.me/CyberSecurityTechnologies/10630 2024-08-22 10:54:43+00:00| seen| Telegram/-neokYhdGAOIq0TWlgd0SgamQXnfg5SD8KVN61CxyDujW6o...

CVE-2024-29974

CVE-2024-29974 affects Zyxel NAS326 and NAS542 devices via a remote code-execution flaw in the CGI program file_upload-cgi. An unauthenticated attacker can upload a crafted configuration file to execute arbitrary code. Affected firmware versions are NAS326 before V5.21(AAZF.17)C0 and NAS542 befor...